|
|
I know I have mentioned several times that I am working on an ontology for describing vulnerabilities. We finally have an initial public draft. Draft and announcement is available here: http://csrc.nist.gov/publications/PubsDrafts.html#NIST-IR-8138 This is the first of hopefully several drafts and we are looking at the comments to see in which ways we need to modify in order to satisfy the needs for vulnerability management. Regards, -Harold |